Rust Penetration Testing

Open-source Rust projects categorized as Penetration Testing

Top 3 Rust Penetration Testing Projects

Penetration Testing
  1. KeyHunter

    Fast Rust scanner to find leaked API keys on GitHub - OpenAI, Anthropic, Claude, GPT, AWS, Stripe, HuggingFace + 45 providers. Verify active secrets instantly.

  2. AppSignal

    AppSignal knows why the f*#k it crashed. Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.

    AppSignal logo
  3. sh4d0wup

    Signing-key abuse and update exploitation framework

  4. ghosthound

    GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted objects via SHOW_DELETED, mapping who can restore them, and revealing when a reanimated identity regains privileged group membership.

    Project mention: Ask HN: What Are You Working On? (July 2026) | news.ycombinator.com | 2026-07-12

    im developing some FOSS cybersec tools lately and im getting some nice feedback so it motivates me, the tools are

    Skewrun -> a tool that solves the Kerberos KRB_AP_ERR_SKEW (Clock Skew Too Great) error, allowing you to run tools like Impacket or NetExec from a Linux attack machine whose clock is heavily desynchronized from the target Windows domain, without requiring root privileges to change the system time. (https://github.com/JVBotelho/skewrun)

    GhostHound -> an Bloodhound opengraph lib that deals with Tombstone reanimation as a BloodHound attack path, enumerating CN=Deleted Objects and who can restore them (https://github.com/JVBotelho/ghosthound), this one even landed in Bloodhound's documentation as community lib

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Rust Penetration Testing discussion

Log in or Post with

Rust Penetration Testing related posts

  • GitHub: Can no longer search code without being logged in

    1 project | news.ycombinator.com | 27 Nov 2023
  • What's everyone working on this week (26/2023)?

    15 projects | /r/rust | 26 Jun 2023
  • Show HN: Nosey Parker, a fast and low-noise secrets detector for textual data

    1 project | /r/hypeurls | 2 Mar 2023
  • Nosey Parker, a fast and low-noise secrets detector, now supports enumerating GitHub repositories and writing results in SARIF format

    1 project | /r/blueteamsec | 2 Mar 2023
  • Show HN: Nosey Parker, a fast and low-noise secrets detector for textual data

    2 projects | news.ycombinator.com | 2 Mar 2023
  • Nosey Parker, a newer secrets detector, can scan 100GB of Linux kernel commit history in 2 minutes on a laptop, and now can write SARIF output

    1 project | /r/SAST | 2 Mar 2023
  • Nosey Parker, a fast secrets detector, now enumerates GitHub repos, writes SARIF output, and has 90 default rules

    1 project | /r/netsec | 2 Mar 2023
  • A note from our sponsor - AppSignal
    www.appsignal.com | 7 Oct 2026
    Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise. Learn more →

Index

What are some of the best open-source Penetration Testing projects in Rust? This list will help you:

# Project Stars
1 KeyHunter 193
2 sh4d0wup 131
3 ghosthound 44

Sponsored
AppSignal knows why the f*#k it crashed.
Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.
www.appsignal.com